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Response to Office Action mailed September 4, 2007 
Listing of the Claims: 

The listing of claims will replace all prior versions, and listings, of claims in the application: 

1 . (Currently Amended) A communication device for verifying whether application data is 
valid in order to determine whether to execute the application data on the communication device, 
the verification of the application data using a first file, a second file, and a third file, the first file 
comprising the application data, the second file comprising application validity data used to 
verify validity of the application data in the first file, and the third file comprising second file 
validity data calculated with a one-way function and used to verify the second file, the 
communication device comprising: 

a r e c e iving means receiver for receivin g the first file, second file, and third file; 

(a) a first file which contains data indicating a c e rtain value which is calculat e d on 
th e basis of data of a c e rtain type contained in anoth e r fil e , and 

(b) a s e cond fil e which contains data of said c e rtain typ e ; 
at least one processor for: 

a calculating m e ans for calculating a valu e which is obtain e d for assigning said 
data of said c e rtain typ e contain e d in said s e cond fil e to a generating a second file 
calculated value using the one-way function , at least a part of the second file being input 
to the one-way function to generate the second file calculated value ; 

a comparing m e ans for comparing the second file calculated value with the 
second file validity data in the third file valu e which is calculat e d by said calculating 
m e an s and said certain value indicated by said data contain e d in said first fil e; and 

a d e t e rmining means for determining whether the second file is valid based on the 
comparing of the second file calculated value with the second file validity data in the 
third file validity of correspond e nc e of said first fil e and said s e cond file according to a 
result of the comparison made by said comparing m e ans ; and 

executing the application data on the communication device if the application data 
is verified using the application validity data in the second file and if it is determined that 
the second file is valid . 

2. (Canceled) 
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3. (Canceled) 

4. (Canceled) 

5. (Canceled) 

6. (Canceled) 

7. (New) The communication device of claim 1, wherein, if it is determined that the second 
file is valid, the processor further verifies whether the application data in the first file is valid 
using the application validity data in the second file. 

8. (New) The communication device of claim 7, where the application validity data is 
calculated on the basis of a one-way application validity function, the one-way application 
validity function using at least a part of the application data in the first file to generate the 
application validity data. 

9. (New) The communication device of claim 8, where the one-way application validity 
function comprises a hash function; 

where the application validity data comprises a hash value; 

where at least a part of the first file is input to the hash function to generate a calculated 
hash value; and 

where using the application validity data in the second file to verify the validity of the 
application data in the first file comprises comparing the calculated hash value with the hash 
value in the second file. 

10. (New) The communication device of claim 9, where the one-way application validity 
function and the one-way function each comprise the same hash function. 
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1 1 . (New) The communication device of claim 1, where the application data comprises an 
application program. 

12. (New) The communication device of claim 1, where at least a part of the second file 
comprises independent data, the independent data being independent of the application data 
contained in the first file; and 

where generating a second file calculated value using the one-way function comprises 
inputting the independent data to the one-way function to generate the second file calculated 
value. 

13. (New) The communication device of claim 12, where the independent data comprises 
certificate data for certifying authenticity of the application data, the certificate data being 
provided by a certificate authority. 

14. (New) The communication device of claim 13, where the third file is received from a 
trusted server; 

where the second file is received from a content provider server, the content provider 
server being different from the trusted server; and 

where the third file is used to verify the certificate data in the second file. 

15. (New) The communication device of claim 1, where the one-way function comprises a 
hash function; 

where the second file validity data comprises a hash value; 

where at least a part of the second file is input to the hash function to generate a 
calculated hash value; and 

where comparing the second file calculated value with the second file validity data in the 
third file comprises comparing the calculated hash value with the hash value in the third file. 

16. (New) The communication device of claim 1, where the receiver receives the second and 
third files prior to receiving the first file; and 
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where the receiver receives the first file only after the at least one processor determines 
whether the second file is valid. 

17. (New) The communication device of claim 1, where the second file contains data 
indicating a location where a program, which is contained in the first file and run in the 
communication device, is stored. 

1 8. (New) A method for a communication device to verify whether application data is valid 
in order to determine whether to execute the application data on the communication device, the 
verification of the application data using the first file, a second file, and a third file, the first file 
comprising the application data, the second file comprising application validity data used to 
verify validity of the application data in the first file, and the third file comprising second file 
validity data calculated with a one-way function and used to verify the second file, the method 
comprising: 

receiving the first file, the second file and the third file at the communication device, 
generating a second file calculated value using the one-way function, at least a part of the 
second file being input to the one-way function to generate the second file calculated value; 

comparing the second file calculated value with the second file validity data in the third 

file; 

determining whether the second file is valid based on the comparing of the second file 
calculated value with the second file validity data in the third file; and 

executing the application data on the communication device if the application data is 
verified using the application validity data in the second file and if it is determined that the 
second file is valid. 

1 9. (New) The method of claim 1 8, further comprising, if it is determined that the second file 
is valid, verifying whether the application data in the first file is valid using the application 
validity data in the second file. 
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20. (New) The method of claim 19, where the application validity data is calculated on the 
basis of a one-way application validity function, the one-way application validity function using 
at least a part of the application data in the first file to generate the application validity data. 

21 . (New) The method of claim 20, where the one-way application validity function 
comprises a hash function; 

where the application validity data comprises a hash value; 

where at least a part of the first file is input to the hash function to generate a calculated 
hash value; and 

where using the application validity data in the second file to verify the validity of the 
application data in the first file comprises comparing the calculated hash value with the hash 
value in the second file. 

22. (New) The method of claim 21, where the one-way application validity function and the 
one-way function each comprise the same hash function. 

23. (New) The method of claim 18, where the application data comprises an application 
program. 

24. (New) The method of claim 18, where at least a part of the second file comprises 
independent data, the independent data being independent of the application data contained in the 
first file; and 

where generating a second file calculated value using the one-way function comprises 
inputting the independent data to the one-way function to generate the second file calculated 
value. 

25. (New) The method of claim 24, where the independent data comprises certificate data 
for certifying authenticity of the application data, the certificate data being provided by a 
certificate authority. 

26. (New) The method of claim 25, where the third file is received from a trusted server; 
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where the second file is received from a content provider server, the content provider 
server being different from the trusted server; and 

where the third file is used to verify the certificate data in the second file. 

27. (New) The method of claim 1 8, where the one-way function comprises a hash function; 
where the second file validity data comprises a hash value; 

where at least a part of the second file is input to the hash function to generate a 
calculated hash value; and 

where comparing the second file calculated value with the second file validity data in the 
third file comprises comparing the calculated hash value with the hash value in the third file. 

28. (New) The method of claim 1 8, where the second and third files are received prior to 
receiving the first file; and 

where the first file is received only after determining whether the second file is valid. 

29. (New) The method of claim 18, where the second file contains data indicating a location 
where a program, which is contained in the first file and run in the communication device, is 
stored. 
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